347
IRDAI requirements in the library
Seeded with their controls, ready to switch on for your next cycle.
Frameworks
Purplecop GRC · IRDAI
IRDAI guidelines, ready to switch on
Insurers have to show IRDAI that information and cyber security is governed, tested and audited, year after year. Purplecop GRC carries 347 IRDAI requirements with their controls, so each annual cycle starts from last year's work, not a blank sheet.
The difference
From an annual rebuild to a year that carries over
What changes for an insurer on Purplecop.
Why Purplecop
What only Purplecop brings to IRDAI
A programme that carries over from year to year instead of resetting.
One control, many frameworks
A control shared across frameworks is created once in the library, not rebuilt for each one. The work you do for IRDAI counts toward everything else you hold.
Map once, satisfy many
AI Policy Builder
Start from a ready-made policy, not a blank page. Each one is tagged to the frameworks it supports and goes through review in the same place.
AI Policy Builder
Findings that cannot quietly age
Corrective actions run through a tracked workflow with 5-Whys and fishbone analysis, ageing buckets and three escalation tiers.
Corrective actions
A control score anyone can explain
Control effectiveness is six weighted factors, from the audit conclusion to assurance, so anyone can see why a control scored what it did.
Audit management
What you get
Built on one platform, with people who use it
Platform
Purplecop GRC
The whole GRC estate in one product: frameworks, controls, policies, evidence, risk and audit on one control library.
FrameworksControlsPoliciesAudit managementCorrective actions
Services
Practitioners beside the platform
The team that runs your engagement works inside the same system, so the work they do stays with you.
Also on the platform
TPRM
Onboard, assess, score and continuously monitor every vendor in one workflow.
Third-party risk
Asset Intelligence
Asset discovery, network monitoring and the audit log in one module, so every asset’s data lives in one place.
Asset Intelligence
Phishing Simulation
Live phishing campaigns with per-user risk scores, run entirely in-house.
Human layer
LMS
Role-based security awareness training for every employee, tracked to completion.
Human layer
People
A directory of the people in scope for training, policy sign-off and access reviews.
People
RBAC
Role-based access control with granular permissions, on a least-privilege model.
Access control
Questions
What teams ask us about IRDAI compliance
Is IRDA the same as IRDAI?
Yes. The regulator is now the Insurance Regulatory and Development Authority of India, IRDAI.
How many IRDAI requirements are covered?
347, linked to controls in the library.
Does Purplecop report to IRDAI for us?
No. Purplecop produces the records and reports; submissions to IRDAI stay with you.
How much faster is it?
It scales with how much you integrate: the more connectors you turn on, the more evidence is collected automatically, saving up to 70% of the time you used to spend preparing for each annual audit.
See it against your own scope
We will walk the product against your scope and show you what runs on day one and what needs configuring.